I know a person in a telecom company in Analytics (Digital and CVM). They have the ability to see the phone number (only encrypted) browsing their current websi

I know a person in a telecom company in Analytics (Digital and CVM). They have the ability to see the phone number (only encrypted) browsing their current website. This information is part of clickstream but it is not shared with any third party because it's a confidential information that if shared without customer consent will bring loads of issues to company. The recent GDPR is one thing that keeps companies on their toes.